No response? :-/
Ok, my friend has VPS server, and he set up OpenVPN on it, and basically I have the same problem. No sites will load for him or me.
Here is the log:
Sat Feb 25 15:57:38 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sat Feb 25 15:57:38 2012 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Feb 25 15:57:38 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Feb 25 15:57:38 2012 LZO compression initialized
Sat Feb 25 15:57:38 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Feb 25 15:57:38 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Feb 25 15:57:38 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Feb 25 15:57:38 2012 Local Options hash (VER=V4): '2547efd2'
Sat Feb 25 15:57:38 2012 Expected Remote Options hash (VER=V4): '77cf0943'
Sat Feb 25 15:57:38 2012 Attempting to establish TCP connection with 63.141.232.85:443
Sat Feb 25 15:57:39 2012 TCP connection established with 63.141.232.85:443
Sat Feb 25 15:57:39 2012 TCPv4_CLIENT link local: [undef]
Sat Feb 25 15:57:39 2012 TCPv4_CLIENT link remote: 63.141.232.85:443
Sat Feb 25 15:57:39 2012 TLS: Initial packet from 63.141.232.85:443, sid=6853483f a0bcf38d
Sat Feb 25 15:57:39 2012 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Feb 25 15:57:46 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=hostumble.com/emailAddress=
me@myhost.mydomain
Sat Feb 25 15:57:46 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=
me@myhost.mydomain
Sat Feb 25 15:58:39 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Feb 25 15:58:39 2012 TLS Error: TLS handshake failed
Sat Feb 25 15:58:39 2012 Fatal TLS error (check_tls_errors_co), restarting
Sat Feb 25 15:58:39 2012 TCP/UDP: Closing socket
Sat Feb 25 15:58:39 2012 SIGUSR1[soft,tls-error] received, process restarting
Sat Feb 25 15:58:39 2012 Restart pause, 5 second(s)
Sat Feb 25 15:58:44 2012 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Feb 25 15:58:44 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Feb 25 15:58:44 2012 Re-using SSL/TLS context
Sat Feb 25 15:58:44 2012 LZO compression initialized
Sat Feb 25 15:58:44 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Feb 25 15:58:44 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Feb 25 15:58:44 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Feb 25 15:58:44 2012 Local Options hash (VER=V4): '2547efd2'
Sat Feb 25 15:58:44 2012 Expected Remote Options hash (VER=V4): '77cf0943'
Sat Feb 25 15:58:44 2012 Attempting to establish TCP connection with 63.141.232.85:443
Sat Feb 25 15:58:44 2012 TCP connection established with 63.141.232.85:443
Sat Feb 25 15:58:44 2012 TCPv4_CLIENT link local: [undef]
Sat Feb 25 15:58:44 2012 TCPv4_CLIENT link remote: 63.141.232.85:443
Sat Feb 25 15:58:44 2012 TLS: Initial packet from 63.141.232.85:443, sid=1010762e 3d1925c1
Sat Feb 25 15:58:51 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=hostumble.com/emailAddress=
me@myhost.mydomain
Sat Feb 25 15:58:51 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=
me@myhost.mydomain
Sat Feb 25 15:58:56 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 25 15:58:56 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 25 15:58:56 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 25 15:58:56 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 25 15:58:56 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Feb 25 15:58:56 2012 [server] Peer Connection Initiated with 63.141.232.85:443
Sat Feb 25 15:58:58 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Feb 25 15:59:00 2012 PUSH: Received control message: 'PUSH_REPLY,route 10.66.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.10 10.8.0.9'
Sat Feb 25 15:59:00 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sat Feb 25 15:59:00 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sat Feb 25 15:59:00 2012 OPTIONS IMPORT: route options modified
Sat Feb 25 15:59:00 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Feb 25 15:59:00 2012 ROUTE default_gateway=106.206.138.249
Sat Feb 25 15:59:00 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{C5415651-8AA1-4A2A-AF33-4943E4D22811}.tap
Sat Feb 25 15:59:00 2012 TAP-Win32 Driver Version 9.9
Sat Feb 25 15:59:00 2012 TAP-Win32 MTU=1500
Sat Feb 25 15:59:00 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {C5415651-8AA1-4A2A-AF33-4943E4D22811} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Sat Feb 25 15:59:00 2012 Successful ARP Flush on interface [36] {C5415651-8AA1-4A2A-AF33-4943E4D22811}
Sat Feb 25 15:59:05 2012 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Sat Feb 25 15:59:05 2012 C:\WINDOWS\system32\route.exe ADD 63.141.232.85 MASK 255.255.255.255 106.206.138.249
Sat Feb 25 15:59:05 2012 Route addition via IPAPI succeeded [adaptive]
Sat Feb 25 15:59:05 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.9
Sat Feb 25 15:59:05 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=36]
Sat Feb 25 15:59:05 2012 Route addition via IPAPI failed [adaptive]
Sat Feb 25 15:59:05 2012 Route addition fallback to route.exe
OK!
Sat Feb 25 15:59:05 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.9
Sat Feb 25 15:59:05 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=36]
Sat Feb 25 15:59:05 2012 Route addition via IPAPI failed [adaptive]
Sat Feb 25 15:59:05 2012 Route addition fallback to route.exe
OK!
Sat Feb 25 15:59:05 2012 C:\WINDOWS\system32\route.exe ADD 10.66.0.0 MASK 255.255.255.0 10.8.0.9
Sat Feb 25 15:59:06 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=36]
Sat Feb 25 15:59:06 2012 Route addition via IPAPI failed [adaptive]
Sat Feb 25 15:59:06 2012 Route addition fallback to route.exe
OK!
Sat Feb 25 15:59:06 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Sat Feb 25 15:59:06 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=36]
Sat Feb 25 15:59:06 2012 Route addition via IPAPI failed [adaptive]
Sat Feb 25 15:59:06 2012 Route addition fallback to route.exe
OK!
Sat Feb 25 15:59:06 2012 Initialization Sequence Completed
Here is the config file:
client
dev tun
proto tcp
remote 63.141.232.85 443 #- your OPENVPN server ip and port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass pw.txt
comp-lzo
verb 3
Netstat before connecting:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Asad>netstat -nr
===========================================================================
Interface List
47...........................Nokia C6-00 USB Modem (OTA)
36...00 ff c5 41 56 51 ......TAP-Win32 Adapter V9 #3
22...00 ff e4 18 2a 7a ......Anchorfree HSS Adapter
13...00 22 69 c0 e6 1f ......Bluetooth Device (Personal Area Network)
10...00 21 9b f7 ab c1 ......Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller
1...........................Software Loopback Interface 1
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
35...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #7
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 On-link 106.206.138.249 2
106.206.138.249 255.255.255.255 On-link 106.206.138.249 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
173.245.79.66 255.255.255.255 On-link 106.206.138.249 2
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 106.206.138.249 2
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 106.206.138.249 257
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
35 1150 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
18 58 2001::/32 On-link
18 306 2001:0:4137:9e76:1caa:1f5d:9531:7506/128
On-link
35 1050 2002::/16 On-link
35 306 2002:6ace:8af9::6ace:8af9/128
On-link
18 306 fe80::/64 On-link
18 306 fe80::1caa:1f5d:9531:7506/128
On-link
1 306 ff00::/8 On-link
18 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\Asad>
Netstat after connecting:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Asad>netstat -nr
===========================================================================
Interface List
47...........................Nokia C6-00 USB Modem (OTA)
36...00 ff c5 41 56 51 ......TAP-Win32 Adapter V9 #3
22...00 ff e4 18 2a 7a ......Anchorfree HSS Adapter
13...00 22 69 c0 e6 1f ......Bluetooth Device (Personal Area Network)
10...00 21 9b f7 ab c1 ......Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller
1...........................Software Loopback Interface 1
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
35...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #7
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 On-link 106.206.138.249 2
106.206.138.249 255.255.255.255 On-link 106.206.138.249 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
173.245.79.66 255.255.255.255 On-link 106.206.138.249 2
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 106.206.138.249 2
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 106.206.138.249 257
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
35 1150 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
18 58 2001::/32 On-link
18 306 2001:0:4137:9e76:1caa:1f5d:9531:7506/128
On-link
35 1050 2002::/16 On-link
35 306 2002:6ace:8af9::6ace:8af9/128
On-link
18 306 fe80::/64 On-link
18 306 fe80::1caa:1f5d:9531:7506/128
On-link
1 306 ff00::/8 On-link
18 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\Asad>cmd
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Asad>netstat -nr
===========================================================================
Interface List
47...........................Nokia C6-00 USB Modem (OTA)
36...00 ff c5 41 56 51 ......TAP-Win32 Adapter V9 #3
22...00 ff e4 18 2a 7a ......Anchorfree HSS Adapter
13...00 22 69 c0 e6 1f ......Bluetooth Device (Personal Area Network)
10...00 21 9b f7 ab c1 ......Marvell Yukon 88E8040 PCI-E Fast Ethernet Controll
er
1...........................Software Loopback Interface 1
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
35...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #7
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 On-link 106.206.138.249 2
0.0.0.0 128.0.0.0 172.24.3.1 10.8.0.6 4511
0.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 4256
10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 4256
10.8.0.4 255.255.255.252 On-link 10.8.0.6 4511
10.8.0.6 255.255.255.255 On-link 10.8.0.6 4511
10.8.0.7 255.255.255.255 On-link 10.8.0.6 4511
10.66.0.0 255.255.255.0 10.8.0.5 10.8.0.6 4256
63.141.232.85 255.255.255.255 On-link 106.206.138.249 1
106.206.138.249 255.255.255.255 On-link 106.206.138.249 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
128.0.0.0 128.0.0.0 172.24.3.1 10.8.0.6 4511
128.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 4256
173.245.79.66 255.255.255.255 On-link 106.206.138.249 2
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 10.8.0.6 4508
224.0.0.0 240.0.0.0 On-link 106.206.138.249 2
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 10.8.0.6 4511
255.255.255.255 255.255.255.255 On-link 106.206.138.249 257
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
35 1150 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
35 1050 2002::/16 On-link
35 306 2002:6ace:8af9::6ace:8af9/128
On-link
36 286 fe80::/64 On-link
36 286 fe80::9cca:769c:87a7:e4a2/128
On-link
1 306 ff00::/8 On-link
36 286 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\Asad>